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A SHORTENED STATUTORY PERIOD FOR REPLY IS SET TO EXPIRE 1 MONTH(S) OR THIRTY (30) DAYS, 
WHICHEVER IS LONGER, FROM THE MAILING DATE OF THIS COMMUNICATION. 

• Extensions of time may be available under the provisions of 37 CFR 1.136(a). In no event, however, may a reply be timely filed 
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earned patent term adjustment. See 37 CFR 1 .704(b). 

Status 

^)M Responsive to communication(s) filed on 07 November 2005 . 
2a)n This action is FINAL. 25)0 This action is non-finaL 

3) n Since this application is in condition for allowance except for fomnal matters, prosecution as to the merits is 

closed in accordance with the practice under Ex parte Quayle, 1 935 CD. 1 1 , 453 O.G. 21 3. 
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4) 13 Claim(s) 1-117 is/are pending in the application. 
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5) 0 Claim(s) is/are allowed. 

6) n Claim(s) is/are rejected. 

?)□ Claim(s) is/are objected to. 

8) S Claim(s) 1-117 are subject to restriction and/or election requirement. 
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9) n The specification is objected to by the Examiner. 

10)S The drawing(s) filed on 10 September 2003 is/are: a)^ accepted or b)n objected to by the Examiner. 
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DETAILED ACTION 



1 . Claims 1-117 have been presented for examination. . 

Election / Restrictions 

2. This application contains claims directed to the following patentably distinct 
claimed inventions. Restriction to one of the following invention is required under 35 
U.S.C 121: 

I. Claims 1-7 drawn to specify a content of a role-based access 
control list including both of the source and destination user group 
identifiers for network security purpose, classified in class 726, 
subclass 2. 

II. Claims 55 - 74 drawn to provide a mechanism of populating an 
access control list through a received packet from both of the 
source and destination user group identifiers for network security 
purpose, classified in class 726, subclass 14. 

III. Claims 99 - 1 1 0 drawn to specify a content and structure of an 
access permission matrix including a row element, a column 
element of user groups obtained from the access control list and a 
pointer to another permission list for network security purpose, 
classified in class 726. subclass 5. 
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IV. Claims 8-13 drawn to specify a content of a forwarding table 
including ports, MAC, VLAN ID and both of the source and 
destination user group identifiers for network security purpose, 
classified in class 713, subclass 153. 

V. Claims 28 - 32, 41 - 43, 52 - 54 and 75 - 98 drawn to provide a 
mechanism of populating an forwarding table through a received 
packet from both of the source and destination user group 
identifiers for network security purpose, classified in class 713, 
subclass 151. 

Examiner notes even though claims 28 - 32, 41 - 43, 52 - 54 are 
dependent on claims 14, 33 and 44 respectively, those claims fail to 
further limit the corresponding independent claims 14, 33 and 44 
respectively (i.e. "comparing" and "populating" are completely 
unrelated events) and should be qualified as independent claims 
the same way as each of independent claims 75, 87 and 93. 

VI. Claims 14 - 27, 33 - 40 and 44 - 51 drawn to provide a 
mechanism of validating a packet based upon an access control list 
including both of the source and destination user group identifiers 
for network security purpose, classified in class 726, subclass 4. 

VII. Claims 111 - 1 1 5 drawn to provide a mechanism of generating a 
packet based upon an access control list including both of the 
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source and destination user group identifiers for network security 
purpose, classified in class 726, subclass 15. 
VIII. Claims 111,113 and 116-117 drawn to provide a mechanism of 
generating a packet based upon an forwarding table including ports 
and both of the source and destination user group identifiers for 
network security purpose, classified in class 726, subclass 3. 

3. This application contains claims directed to the following patentably distinct 
species: Group I - VIII, where Group VII and VIII have generic claims 1 1 1 and 1 1 3 as 
presented above. 

Applicant is required under 35 U.S.C. 121 to elect a single disclosed species for 
prosecution on the merits to which the claims shall be restricted if no generic claim is 
finally held to be allowable. Currently, claims 1 11 and 1 1 3 are generic for Group VII 
andVIIL 

Applicant is advised that a reply to this requirement must include an identification 
of the species that is elected consonant with this requirement, and a listing of all claims 
readable thereon, including any claims subsequently added. An argument that a claim 
is allowable or that all claims are generic is considered nonresponsive unless 
accompanied by an election. 
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Upon the allowance of a generic claim, applicant will be entitled to consideration 
of claims to additional species which depend from or otherwise require all the limitations 
of an allowable generic claim as provided by 37 CFR 1 .141 . If claims are added after 
the election, applicant must indicate which are readable upon the elected species. 
MPEP § 809.02(a). 

Invention I has separate utility directed a content of a role-based access control 
list including both of the source and destination user group identifiers for network 
security purpose. 

Invention II has separate utility directed to provide a mechanism of populating an 
access control list through a received packet from both of the source and destination 
user group identifiers for network security purpose. 

Invention III has separate utility directed to specify a content and structure of an 
access permission matrix including a row element, a column element of user groups 
obtained from the access control list and a pointer to another permission list for network 
security purpose. 

Invention IV has separate utility directed to specify a content of a forwarding table 
including ports, MAC, VLAN ID and both of the source and destination user group 
identifiers for network security purpose. 

Invention V has separate utility directed to provide a mechanism of populating an 
forwarding table through a received packet from both of the source and destination user 
group identifiers for network security purpose. 
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Invention Vl has separate utility directed to provide a mechanism of validating a 
packet based upon an access control list including both of the source and destination 
user group identifiers for network security purpose. 

Invention VII has separate utility directed to provide a mechanism of generating a 
packet based upon an access control list including both of the source and destination 
user group identifiers for network security purpose. 

Invention VIII has separate utility directed to provide a mechanism of generating 
a packet based upon an fonA/arding table including ports and both of the source and 
destination user group identifiers for network security. 

4. Because these inventions are distinct for the reasons given above and have 
acquired a separate status in the art as shown by their different classification, restriction 
for examination purpose as indicated is proper. 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Longbit Chai whose telephone number is 571-272-3788. 
The examiner can normally be reached on Monday-Friday 8:00am-4:00pm. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Ayaz R Sheikh can be reached on 571-272-3795. The fax phone number 
for the organization where this application or proceeding is assigned is 703-872-9306. 
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Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.goy. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). 
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